US20120250657A1 - Handoff Method and System for Mobile Terminal - Google Patents
Handoff Method and System for Mobile Terminal Download PDFInfo
- Publication number
- US20120250657A1 US20120250657A1 US13/505,766 US201013505766A US2012250657A1 US 20120250657 A1 US20120250657 A1 US 20120250657A1 US 201013505766 A US201013505766 A US 201013505766A US 2012250657 A1 US2012250657 A1 US 2012250657A1
- Authority
- US
- United States
- Prior art keywords
- certification
- information
- association
- association information
- service
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 60
- 230000005540 biological transmission Effects 0.000 claims description 7
- 230000008569 process Effects 0.000 claims description 5
- 238000004891 communication Methods 0.000 description 13
- 238000010586 diagram Methods 0.000 description 6
- 238000012423 maintenance Methods 0.000 description 4
- 238000011161 development Methods 0.000 description 2
- 230000001629 suppression Effects 0.000 description 2
- 230000008901 benefit Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000008447 perception Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W36/00—Hand-off or reselection arrangements
- H04W36/0005—Control or signalling for completing the hand-off
- H04W36/0011—Control or signalling for completing the hand-off for data sessions of end-to-end connection
- H04W36/0033—Control or signalling for completing the hand-off for data sessions of end-to-end connection with transfer of context information
- H04W36/0038—Control or signalling for completing the hand-off for data sessions of end-to-end connection with transfer of context information of security context information
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
- H04W12/062—Pre-authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/062—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying encryption of the keys
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/067—Network architectures or network communication protocols for network security for supporting key management in a packet data network using one-time keys
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W36/00—Hand-off or reselection arrangements
- H04W36/0005—Control or signalling for completing the hand-off
- H04W36/0011—Control or signalling for completing the hand-off for data sessions of end-to-end connection
- H04W36/0016—Hand-off preparation specially adapted for end-to-end data sessions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W36/00—Hand-off or reselection arrangements
- H04W36/08—Reselecting an access point
Definitions
- the present invention relates to the communication field, and particularly, to a handover method and system for a mobile terminal based on a wireless local area network.
- WLAN wireless local area network
- IEEE Institute of Electrical and Electronics Engineers 802.11
- AP wireless access point
- cell limited physical area
- Different APs provide service for different cells, and a plurality of APs achieve a large area of service coverage all together.
- IEEE802.11 working committee established an IEEE802.11f research group in March 2000, which is responsible for the development and implementation of the Inter Access Point Protocol (IAPP).
- IAPP Inter Access Point Protocol
- FIG. 1 is a schematic diagram of an MT handover scenario in the related art.
- the handover procedure of the MT mainly includes: when the MT moves from the cell (area 1 )) covered by AP 1 service to the cell (area 2 ) covered by AP 2 service, the MT sends a reconnection request to AP 2 , which carries the media access control (MAC) address of AP 1 to which the MT is previously connected; AP 2 returns a reconnection acknowledgement to the MT, and then sends handover information to AP 1 ;
- AP 1 sends information about the MT to AP 2 according to the handover information and queries the maintenance time of the connection with the MT, if the connection maintenance time is less than the handover suppression time, then AP 1 sends a connection relief frame to the MT in the cell covered by its service
- the problems existing in the above solution of the related art at least include: when the MT hands over from a cell covered by AP 1 service to a cell covered by AP 2 service, AP 2 has to re-certificate the MT and has to acquire the information about the MT from AP 1 actively, which causes that the entire handover procedure needs longer time and consumes additional radio resources, greatly reducing the communication efficiency of WLAN; and the key allocated by AP 2 to the MT is shared within the same ESS, significantly reducing communication security.
- the main object of the present invention is to propose a method and system which can rapidly achieve mobile terminal handover with respect to the defects in the related art, which is advantageous for avoiding the influence on the quality of service by temporary service interruption caused by a handover.
- a handover method for a mobile terminal comprises:
- the second AP after having received the data frame, the second AP comparing the associated number between the MT and the first AP and the media access control (MAC) address of the first AP in the data frame with the corresponding contents in the mobile terminal certification and association information stored by the second AP, when the comparison result presents to be consistent, then the second AP encrypting a new key using the shared key of the first AP and sending the information obtained by the encryption to the MT, and the MT removing the association with the first AP and obtains a number associated with the second AP;
- MAC media access control
- the MT adding an association with the second AP according to the obtained number associated with and the second AP, decrypting the obtained new key, and carrying out data transmission between itself and the second AP using the new key.
- the method further comprises:
- the second AP sending the MT and the first AP certification and association information to the MT using the locally stored new key encrypted by the shared key of the first AP.
- the method further comprises:
- the second AP scanning a local mobile terminal certification and association information list regularly and deleting all the certification and association information related to the MT which exceeds the valid time range of certification and association.
- the method further comprises:
- the second AP storing the mobile terminal certification and association information about a cell which overlaps with a cell covered by the second AP service, with the information including the mobile terminal certification and association information about the cell covered by the service of the first AP.
- the method further comprises:
- the second AP storing a shared key of an AP of a cell which overlaps with a cell covered by the second AP service, with the key including the shared key of the first AP.
- the new key is a shared key of the second AP, or the new key is a key generated after the negotiation between the MT and the second AP.
- the method further comprises:
- the second AP sending the MT and the second AP certification and association information to a AP of a cell which overlaps with a cell covered by the second AP service;
- the APs of the cells which overlap with cells covered by the second AP service and do not overlap with cells covered by the first AP service have received the MT and the second AP certification and association information, they looking up the locally stored mobile terminal certification and association information, determining that the MT and the second AP certification and association information is not previously stored, then storing the MT and the second AP certification and association information;
- the APs of the cells which overlap with cells covered by the first AP service and cells covered by second AP service and the first AP have received the MT and the second AP certification and association information, they looking up the locally stored mobile terminal certification and association information, determining that the MT and the first AP certification and association information is previously stored, then deleting the MT and the first AP certification and association information and storing the MT and the second AP certification and association information.
- the method further comprises:
- the first AP after the first AP has stored the MT and the second AP certification and association information, the first AP sending the MT and the first AP association relief information to the APs of the cells which overlap with cells covered the first AP service except the second AP;
- the APs of the cells which overlap with cells covered by the first AP service and do not overlap with cells covered by second AP service have received the MT and the first AP association relief information, they looking up the locally stored mobile terminal certification and association information respectively, determining that the MT and the first AP certification and association information is previously stored, then deleting the MT and the first AP certification and association information.
- the MT and the first AP certification and association information comprises: an associated number between the MT and the first AP and the MAC address of the first AP.
- the MT and the first AP certification and association information further comprises: valid time of MT and the first AP certification and association, the first AP information, MT certification information and valid time of the first AP cache frame.
- the method further comprises that: the first AP is preconfigured with the valid time of for the first AP caching the frame related to the MT, MT and the first AP association relief triggers the timing of the valid time for caching the frame by the first AP; and if there is a data frame to be sent to the MT within the valid time for caching the frame, the first AP caches all the data frames to be sent to the MT for the MT before receiving the MT and the second AP certification and association information.
- the method further comprises that: if the associated number between the MT and the first AP and the MAC address of the first AP do not exist in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP are inconsistent with the information in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP exist in the mobile terminal certification and association information about the cell covered by the first AP service, however the MT and the first AP certification and association information already exceeds the valid time range of the MT and the first AP certification and association, then the handover process ends.
- the method further comprises that: after the second AP has received the data frame, the second AP looks up a locally stored access control list, if the information about MT does not exist in the access control list, then it loops up a mobile terminal certification and association information list of the first cell.
- a handover system for a mobile terminal comprises: a handover request unit, a handover judgment unit, a user side handover execution unit, and a network side handover execution unit, wherein
- the handover request unit is used for sending a data frame for requesting handover when an MT to which it belongs needs to hand over from a first AP to a second AP, with the data frame including an associated number between the MT and the first AP and the MAC address of the first AP;
- the handover judgment unit is used for comparing the associated number between the MT and the first AP and the MAC address of the first AP in the data frame from the handover request unit with the corresponding contents in the mobile terminal certification and association information stored by the second AP, when the comparison result presents to be consistent, then notifying the handover execution unit, encrypting a new key using the shared key of the first AP, and sending the information obtained from encryption to the user side handover execution unit;
- the user side handover execution unit is used for completing the handover with the network side handover execution unit by using the new key.
- the system further comprises a timing judgment unit for judging whether the MT and the first AP certification and association information exists in the valid time range of the MT and the first AP certification and association, and notifying the handover judgment unit to encrypt the new key when the judgment result is yes.
- the system further comprises a first AP side handover information synchronization unit and a second AP side handover information synchronization unit, wherein
- the first AP side handover information synchronization unit is used for sending MT and the first AP association relief information to an AP in a cell which overlaps with a cell covered by the first AP service except the second AP;
- the second AP side handover information synchronization unit is used for sending MT and the second AP certification and association information to an AP in a cell which overlaps with a cell covered by the second AP service.
- each AP since each AP stores the mobile terminal certification and association information about the cells which overlap with the cells covered by its service, when the MT needs to hand over from a cell to another cell, the AP serving another cell can rapidly determine whether or not to allow the MT to access according to the stored information, thus overcoming the problem that the wireless local area network communication needs to be re-certificated during a handover, significantly improving the communication efficiency, and avoiding the influence on the quality of service by temporary service interruption caused by handover; and, since each AP stores the shared key of the APs of the cells which overlap with the cells covered by its service, the data transmitted between the MT and different APs have different keys or employ a key negotiated by the MT and the AP, which can ensure that the data transmitted between each MT and AP have different keys, apparently avoiding the use of the same key by one ESS and effectively improving the communication security.
- FIG. 1 is a schematic diagram of an MT handover scenario in the related art
- FIG. 2 is a flowchart of an MT handover method according to an embodiment of the present invention.
- FIG. 3 is a schematic diagram of an MT handover scenario according to the embodiments of the present invention.
- FIG. 4 is a schematic diagram of a wireless mobile terminal certification and association information list according to the embodiments of the present invention.
- FIG. 5 is a flowchart of an MT handover method according to another embodiment of the present invention.
- FIG. 2 is a flowchart of an MT handover method according to an embodiment of the present invention, this method includes:
- a data frame is sent to a second AP when a mobile terminal (MT) needs to hand over from a cell covered by a first AP service to a cell covered by a second AP service, with the data frame including an associated number between the MT and the first AP and an MAC access of the first AP;
- MT mobile terminal
- the second AP compares the associated number between the MT and the first AP and the media access control (MAC) address of the first AP in the data frame with the corresponding contents in the mobile terminal certification and association information stored by the second AP, wherein when the comparison result presents to be consistent, then the second AP encrypts a new key using the shared key of the first AP locally stored and sends the information obtained from encryption to the MT, and the MT relieves the association with the first AP and obtains a number associated with the second AP.
- MAC media access control
- comparing mobile terminal certification and association information when comparing mobile terminal certification and association information, it further comprises: judging whether the MT and the first AP certification and association information is within the valid time range of the MT and the first AP certification and association, if yes, then the second AP sends the MT and the first AP certification and association information to the MT using the locally stored new key encrypted by the shared key of the first AP.
- the method further comprises:
- the second AP scans a local mobile terminal certification and association information list regularly and deletes all the certification and association information related to the MT which exceeds the valid time range of certification and association.
- the method further comprises:
- the second AP pre-stores the mobile terminal certification and association information about a cell which overlaps with a cell covered by the second AP service, the information includes the mobile terminal certification and association information about a cell which overlaps with a cell covered by the first AP service, and also pre-stores the shared key of an AP of a cell which overlaps with a cell covered by the second AP service, the key includes the shared key of the first AP.
- the new key obtained by the decryption of the MT can be the shared key of the second AP and can also be a key generated after the negotiation between the MT and the second AP.
- the MT and the first AP certification and association information in the technical solution described by the above embodiments includes: an associated number between the MT and the first AP and an MAC address of the first AP, and also can include valid time of MT and the first AP certification and association, the first AP information, MT certification information and valid time for the first AP caching the frame.
- the MT and the first AP certification and association information can be stored in a list or database.
- the method further comprises:
- the association relief between the MT and the first AP triggers the timing of the valid time for the first AP caching the frame
- the method further comprises: the second AP looks up the locally stored mobile terminal certification and association information about the cell covered by the first AP service, if the associated number between the MT and the first AP and the MAC address of the first AP do not exist in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP are inconsistent with the information in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP exist in the mobile terminal certification and association information about the cell covered by the first AP service, however the MT and the first AP certification and association information already exceeds the valid time range of the MT and the first AP certification and association, then the handover process ends.
- the method further comprises: after the second AP has received the data frame sent from the MT, the second AP looks up a locally stored access control list, if the information about MT does not exist in the access control list, then it loops up a mobile terminal certification and association information list of the cell covered by the first AP service.
- cells which overlap with cells covered by the first AP service can be a plurality of cells, which includes a cell covered by the second AP service; likewise, cells which overlap with cells covered by the second AP service can also be a plurality of cells, which also includes a cell covered by the first AP service.
- the second AP sends the MT and the second AP certification and association information to the APs of the cells which overlap with cells covered by the second AP service.
- the APs of the cells which overlap with cells covered by the second AP service and do not overlap with cells covered by the first AP service have received the MT and the second AP certification and association information, they look up the locally stored mobile terminal certification and association information respectively, determine that the MT and the second AP certification and association information is not previously stored, then store the MT and the second AP certification and association information.
- the APs of the cells which overlap with cells covered by the first AP service and the second AP service and the first AP After the APs of the cells which overlap with cells covered by the first AP service and the second AP service and the first AP have received the MT and the second AP certification and association information, they look up the locally stored mobile terminal certification and association information respectively, determine that the MT and the first AP certification and association information is previously stored, then delete the MT and the first AP certification and association information and store the MT and the second AP certification and association information.
- the method further comprises:
- the first AP sends the MT and the first AP association relief information to the APs of the cells which overlap cells covered by with the first AP service except the second AP.
- the APs of the cells which overlap with cells covered by the first AP service and the second AP service After the APs of the cells which overlap with cells covered by the first AP service and the second AP service have received the MT and the first AP association relief information sent from the first AP, they look up the locally stored mobile terminal certification and association information respectively, determine that the MT and the second AP certification and association information is previously stored, then discard the MT and the first AP association relief information.
- the APs of the cells which overlap with cells covered by the first AP service and the second AP service After the APs of the cells which overlap with cells covered by the first AP service and the second AP service have received the MT and the first AP association relief information sent from the first AP, they look up the locally stored mobile terminal certification and association information, determine that the MT and the first AP certification and association information is previously stored, then delete the MT and the first AP association relief information.
- the method further comprises: the first AP sends the data frame cached by the MT to the second AP within the valid time for caching the frame in addition to storing the MT and the second AP certification and association information, then the second AP sends the data frame to the MT.
- each AP since each AP is stored with the mobile terminal certification and association information about a cell which overlaps with a cell covered by its service, when the MT needs to hand over from a cell covered by the first AP service to a cell covered by the second AP service, the second AP can rapidly determine whether or not to allow the MT to access according to the stored information, thus overcoming the problem that the wireless local cell network communication needs to be re-certificated during the handover, significantly improving the communication efficiency, and avoiding the influence on the quality of service by temporary service interruption caused by handover; and, since each AP is also stored with the shared key of an AP of a cell which overlaps with a cell covered by its service, the data transmitted between the MT and different APs have different keys or employ a key negotiated by the MT and the AP, which can ensure that the data transmitted between each MT and AP have different keys, apparently avoiding the problem that one ESS uses an identical key and effectively improving the communication security.
- FIG. 3 is a schematic diagram of an MT handover scenario according to the embodiments of the present invention.
- the handover method for a mobile terminal according to another embodiment of the present invention will be described by taking cells covered by AP 1 , AP 2 , AP 3 , AP 4 , AP 5 , AP 6 , AP 7 , and AP 8 services and the MT handing over from a cell covered by the AP 1 service (area 1 ) to a cell covered by the AP 3 service (area 3 ) as an example.
- Each AP stores the mobile terminal certification and association information about a cell which overlaps with a cell covered by its service.
- cells which overlap with area 1 include: area 2 , area 3 , area 4 , and area 8
- cells which overlap with area 3 include: area 1 , area 2 , area 4 , area 5 , area 6 and area 7 .
- the MT is associated with AP 1
- AP 1 sends the MT and AP 1 certification and association information to AP 2 , AP 3 , AP 4 and AP 8
- AP 2 , AP 3 , AP 4 and AP 8 store the MT and AP 1 certification and association information.
- AP 3 stores the mobile terminal certification and association information about area 1 , the information includes the MT and AP 1 certification and association information. Likewise, if there is the mobile terminal certification and association information about area 2 , area 4 , area 5 , area 6 or area 7 , AP 3 will store the same.
- the wireless terminal certification and association information can be stored in the list, and also the wireless terminal certification and association information can be stored in the database. The specified way for storage is not limited by the present invention. In the following, the technical solution of this embodiment will be described with a wireless terminal certification and association information list.
- FIG. 4 is a schematic diagram of a wireless mobile terminal certification and association information list according to the embodiments of the present invention.
- the information included by the list in the figure is: associated number between the MT and the AP, associated AP information, MAC address of the associated AP, MT certification information, valid time of MT and AP certification and association, valid time for the associated AP caching the frame, etc.
- FIG. 5 is a flowchart of an MT handover method according to another embodiment of the present invention, and the method includes:
- S 202 the MT needs to hand over from a cell (area 1 ) covered by AP 1 service to a cell (area 3 ) covered by AP 3 service, and sends a data frame to AP 3 , the data frame carries the associated number between MT and AP 1 and the MAC address of AP 1 .
- AP 3 compares the associated number between MT and AP 1 and the MAC address of AP 1 in the data frame with the corresponding information in the mobile terminal certification and association information, wherein when the comparison result presents to be consistent, then AP 3 encrypts a new key using the shared key of AP 1 stored locally and sends the information obtained from the encryption to the MT, and the MT relieves the association with AP 1 and obtains a number associated with AP 3 .
- comparing the mobile terminal certification and association information when comparing the mobile terminal certification and association information, it further comprises: judging whether the MT and the AP 1 certification and association information is within the valid time range of the MT and the AP 1 certification and association, if yes, then AP 3 sends the new key encrypted using the locally stored new key encrypted by the shared key of AP 1 to the MT.
- the method further comprises: AP 1 is pre-configured with the valid time for caching the frame related to the MT, the association relief between MT and AP 1 triggers the timing of the valid time for AP 1 caching a frame. If there is a data frame to be sent to the MT within the valid time for caching the frame, the AP 1 caches all the data frames for the MT to be sent to the MT before receiving the MT and AP 3 certification and association information; and if the valid time for caching the frame is expired, even there is a data frame to be sent to the MT, AP 1 will still discard this data frame.
- the method further comprises: if the associated number between the MT and AP 1 and the MAC address of AP 1 do not exist in the mobile terminal certification and association information list, or if the associated number between the MT and AP 1 and the MAC address of AP 1 are inconsistent with the information in the mobile terminal certification and association information list, or if the associated number between the MT and AP 1 and the MAC address of AP 1 exist in the mobile terminal certification and association information list, however the MT and AP 1 certification and association information already exceeds the valid time range of the MT and AP 1 certification and association, then the handover process ends.
- the method further comprises: after AP 3 has received the data frame and before it looked up the local mobile terminal certification and association information list, AP 3 looks up the local access control list; if the MT information does not exist in this local access control list, then S 204 is performed.
- the method further comprises: if the MT information exists in this local access control list, the AP 3 can forward the data sent by the MT according to the information in this local access control list.
- each AP stores the shared key of an AP of a cell which overlaps with a cell covered by its service.
- AP 1 pre-stores the shared keys of AP 2 , AP 3 , AP 4 and AP 8
- AP 3 pre-stores the shared keys of AP 1 , AP 2 , AP 4 , AP 5 , AP 6 , and AP 7
- AP 3 can directly encrypt the new key using the stored shared key of AP 1 .
- This new key can be the shared key of AP 3 and can also be a key generated after the negotiation between MT and AP 3 .
- the MT completes the handover from area 1 to area 3 .
- the method further comprises:
- Step 208 AP 3 sends MT and AP 3 certification and association information to AP 1 , AP 2 , AP 4 , AP 5 , AP 6 and AP 7 .
- Step S 210 after having received the MT and AP 3 certification and association information, AP 5 , AP 6 and AP 7 look up the local mobile terminal certification and association information lists respectively, determine that the MT and AP 3 certification and association information is not previously stored in the local mobile terminal certification and association information list, then store the MT and AP 3 certification and association information into the local mobile terminal certification and association information list.
- Step S 212 after having received the MT and AP 3 certification and association information, AP 1 , AP 2 and AP 4 look up the local mobile terminal certification and association information list respectively, determine that the MT and AP 1 certification and association information is previously stored in the local mobile terminal certification and association information list, since MT and AP 3 certification and association information is much newer, then they delete the MT and AP 1 certification and association information and store the MT and AP 3 certification and association information into the local mobile terminal certification and association information list.
- the method further comprises: AP 1 sends the data frame cached by the MT to AP 3 within the valid time for caching the frame in addition to storing the MT and AP 3 certification and association information, then AP 3 sends this data frame to the MT.
- AP 8 looks up the local mobile terminal certification and association information list respectively, determine that what is previously stored in the local mobile terminal certification and association information list is the MT and AP 1 certification and association information, then delete the MT and AP 1 certification and association information.
- the method further comprises: AP 1 , AP 2 , AP 3 , AP 4 , AP 5 , AP 6 , AP 7 , and AP 8 scan the local mobile terminal certification and association information list regularly, delete the certification and association information related to MT which exceeds the valid time range of the certification and association.
- the method further comprises: when the association time of MT and AP 3 exceeds the valid time range of the MT and AP 3 certification and association, AP 3 sends MT and AP 3 certification and association information to AP 1 , AP 2 , AP 4 , AP 5 , AP 6 , and AP 7 ; and after having received the MT and AP 3 certification and association information, AP 1 , AP 2 , AP 4 , AP 5 , AP 6 , and AP 7 update the local mobile terminal certification and association information lists respectively.
- each AP since each AP stores the mobile terminal certification and association information of a cell which overlaps with a cell covered by its service, when the MT needs to hand over from area 1 to area 3 , AP 3 can rapidly determine whether or not to allow the MT to access according to the stored information, thus overcoming the problem that the wireless local area network communication needs to be re-certificated during the handover, significantly improving the communication efficiency, and avoiding the influence on the quality of service by temporary service interruption caused by the handover; and, since each AP also stores the shared key of an AP of a cell which overlaps with a cell covered by its service, the data transmitted between the MT and different APs have different keys or employ a key negotiated by the MT and the AP, which can ensure that the data transmitted between each MT and AP have different keys, apparently avoiding the problem that one ESS uses an identical key and effectively improving the communication security.
- the above handover process can also be achieved by setting a system, for example:
- the handover request unit is used for sending a data frame for requesting a handover when an MT to which it belongs needs to handover from a first AP to a second AP, with the data frame including an associated number between MT and the first AP and the MAC address of the first AP;
- the handover judgment unit is used for comparing the associated number between MT and the first AP and the MAC address of the first AP in the data frame from the handover request unit with the corresponding contents in the mobile terminal certification and association information stored by the second AP, when the comparison result presents to be consistent, then notifying the handover execution unit, encrypting a new key using the shared key of the first AP, and sending the information obtained from the encryption to the user side handover execution unit; and the user side handover execution unit is used for completing the handover with the network side handover execution unit by using the new key.
- a timing judgment unit can also be provided in the second AP for judging whether the MT and the first AP certification and association information exists in the valid time range of the MT and the first AP certification and association, and notifying the handover judgment unit to encrypt the new key when the judgment result is yes.
- a first AP side handover information synchronization unit and a second AP side handover information synchronization unit can be provided in the first AP and the second AP respectively, wherein the first AP side handover information synchronization unit is used for sending MT and the first AP association relief information to the APs in the cells which overlap with the cells covered by the first AP service except the second AP; and the second AP side handover information synchronization unit is used for sending MT and the second AP certification and association information to the APs in the cells which overlap with the cells covered by the second AP service.
Abstract
Description
- This application claims the priority benefit of PCT/CN2010/071642 filed on Apr. 8. 2010 and Chinese Application No. 200910110473.6 filed on Nov. 3, 2009. The contents of these applications are hereby incorporated by reference in their entirety.
- The present invention relates to the communication field, and particularly, to a handover method and system for a mobile terminal based on a wireless local area network.
- With the rapid development of the network and the popularization of laptops, the requirements on mobile office is becoming higher and higher. The conventional wired local area network is limited by the layout, and the wires are easy to be damaged, bringing inconvenience to maintenance and capacity expansion, and also the relocation and movement of various nodes in the network are quite cumbersome. Therefore, a wireless local area network which is high efficient and convenient and flexible in networking emerges because of demand.
- The wireless local area network (WLAN) is a product of the combination of computer networks and wireless communication technologies. It takes a wireless multi-access channel as the transmission media, carries out data interaction using electromagnetic waves, and achieves the function of the conventional wired local area networks. Currently, the American Institute of Electrical and Electronics Engineers (IEEE) 802.11 has become the standard of WLAN and obtains a great deal of application and support. WLAN at least has to include a wireless access point (AP), and AP provides service within a limited physical area (abbreviated as cell in the following); if a large area of service coverage is to be achieved, a plurality of APs need to be installed. Different APs provide service for different cells, and a plurality of APs achieve a large area of service coverage all together. In the WLAN, when the mobile terminal (MT) moves from a cell to another cell, i.e. “handover” occurs to MT, there will be the problem of how to keep continuous data transmission. In order to solve this problem, IEEE802.11 working committee established an IEEE802.11f research group in March 2000, which is responsible for the development and implementation of the Inter Access Point Protocol (IAPP).
- As shown in
FIG. 1 ,FIG. 1 is a schematic diagram of an MT handover scenario in the related art. In the figure, there are two APs: AP1 and AP2; two cells:area 1 andarea 2; and one MT. In the related art, the handover procedure of the MT mainly includes: when the MT moves from the cell (area1)) covered by AP1 service to the cell (area2) covered by AP2 service, the MT sends a reconnection request to AP2, which carries the media access control (MAC) address of AP1 to which the MT is previously connected; AP2 returns a reconnection acknowledgement to the MT, and then sends handover information to AP1; AP1 sends information about the MT to AP2 according to the handover information and queries the maintenance time of the connection with the MT, if the connection maintenance time is less than the handover suppression time, then AP1 sends a connection relief frame to the MT in the cell covered by its service and deletes the MT from the local service list, if the connection maintenance time is greater than the handover suppression time, then AP1 does not send the connection relief frame but only deletes the MT from the local service list; AP2 associates with the MT according to the information about the MT and allocates a key to the MT, which is shared in an extended service set (ESS); and the MT carries out data transmission with AP2 using this key. - The problems existing in the above solution of the related art at least include: when the MT hands over from a cell covered by AP1 service to a cell covered by AP2 service, AP2 has to re-certificate the MT and has to acquire the information about the MT from AP1 actively, which causes that the entire handover procedure needs longer time and consumes additional radio resources, greatly reducing the communication efficiency of WLAN; and the key allocated by AP2 to the MT is shared within the same ESS, significantly reducing communication security.
- The main object of the present invention is to propose a method and system which can rapidly achieve mobile terminal handover with respect to the defects in the related art, which is advantageous for avoiding the influence on the quality of service by temporary service interruption caused by a handover.
- A handover method for a mobile terminal comprises:
- sending a data frame to a second AP when a mobile terminal (MT) needs to hand over from a cell covered by a first AP service to a cell covered by the second AP service, with the data frame including an associated number between the MT and the first AP and an MAC access of the first AP;
- after having received the data frame, the second AP comparing the associated number between the MT and the first AP and the media access control (MAC) address of the first AP in the data frame with the corresponding contents in the mobile terminal certification and association information stored by the second AP, when the comparison result presents to be consistent, then the second AP encrypting a new key using the shared key of the first AP and sending the information obtained by the encryption to the MT, and the MT removing the association with the first AP and obtains a number associated with the second AP;
- the MT adding an association with the second AP according to the obtained number associated with and the second AP, decrypting the obtained new key, and carrying out data transmission between itself and the second AP using the new key.
- When comparing the mobile terminal certification and association information, the method further comprises:
- judging whether the MT and the first AP certification and association information is within the valid time range of the MT and the first AP certification and association, if yes, then the second AP sending the MT and the first AP certification and association information to the MT using the locally stored new key encrypted by the shared key of the first AP.
- The method further comprises:
- the second AP scanning a local mobile terminal certification and association information list regularly and deleting all the certification and association information related to the MT which exceeds the valid time range of certification and association.
- The method further comprises:
- the second AP storing the mobile terminal certification and association information about a cell which overlaps with a cell covered by the second AP service, with the information including the mobile terminal certification and association information about the cell covered by the service of the first AP.
- The method further comprises:
- the second AP storing a shared key of an AP of a cell which overlaps with a cell covered by the second AP service, with the key including the shared key of the first AP.
- The new key is a shared key of the second AP, or the new key is a key generated after the negotiation between the MT and the second AP.
- The method further comprises:
- the second AP sending the MT and the second AP certification and association information to a AP of a cell which overlaps with a cell covered by the second AP service;
- after the APs of the cells which overlap with cells covered by the second AP service and do not overlap with cells covered by the first AP service have received the MT and the second AP certification and association information, they looking up the locally stored mobile terminal certification and association information, determining that the MT and the second AP certification and association information is not previously stored, then storing the MT and the second AP certification and association information; and
- after the APs of the cells which overlap with cells covered by the first AP service and cells covered by second AP service and the first AP have received the MT and the second AP certification and association information, they looking up the locally stored mobile terminal certification and association information, determining that the MT and the first AP certification and association information is previously stored, then deleting the MT and the first AP certification and association information and storing the MT and the second AP certification and association information.
- The method further comprises:
- after the first AP has stored the MT and the second AP certification and association information, the first AP sending the MT and the first AP association relief information to the APs of the cells which overlap with cells covered the first AP service except the second AP;
- after the APs of cells which overlap with cells covered by the first AP service and cells covered by second AP service have received the MT and the first AP association relief information, they looking up the locally stored mobile terminal certification and association information, determining that the MT and the second AP certification and association information is previously stored, then discarding the MT and the first AP association relief information; and
- after the APs of the cells which overlap with cells covered by the first AP service and do not overlap with cells covered by second AP service have received the MT and the first AP association relief information, they looking up the locally stored mobile terminal certification and association information respectively, determining that the MT and the first AP certification and association information is previously stored, then deleting the MT and the first AP certification and association information.
- The MT and the first AP certification and association information comprises: an associated number between the MT and the first AP and the MAC address of the first AP.
- The MT and the first AP certification and association information further comprises: valid time of MT and the first AP certification and association, the first AP information, MT certification information and valid time of the first AP cache frame.
- The method further comprises that: the first AP is preconfigured with the valid time of for the first AP caching the frame related to the MT, MT and the first AP association relief triggers the timing of the valid time for caching the frame by the first AP; and if there is a data frame to be sent to the MT within the valid time for caching the frame, the first AP caches all the data frames to be sent to the MT for the MT before receiving the MT and the second AP certification and association information.
- The method further comprises that: if the associated number between the MT and the first AP and the MAC address of the first AP do not exist in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP are inconsistent with the information in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP exist in the mobile terminal certification and association information about the cell covered by the first AP service, however the MT and the first AP certification and association information already exceeds the valid time range of the MT and the first AP certification and association, then the handover process ends.
- The method further comprises that: after the second AP has received the data frame, the second AP looks up a locally stored access control list, if the information about MT does not exist in the access control list, then it loops up a mobile terminal certification and association information list of the first cell.
- A handover system for a mobile terminal comprises: a handover request unit, a handover judgment unit, a user side handover execution unit, and a network side handover execution unit, wherein
- the handover request unit is used for sending a data frame for requesting handover when an MT to which it belongs needs to hand over from a first AP to a second AP, with the data frame including an associated number between the MT and the first AP and the MAC address of the first AP;
- the handover judgment unit is used for comparing the associated number between the MT and the first AP and the MAC address of the first AP in the data frame from the handover request unit with the corresponding contents in the mobile terminal certification and association information stored by the second AP, when the comparison result presents to be consistent, then notifying the handover execution unit, encrypting a new key using the shared key of the first AP, and sending the information obtained from encryption to the user side handover execution unit; and
- the user side handover execution unit is used for completing the handover with the network side handover execution unit by using the new key.
- The system further comprises a timing judgment unit for judging whether the MT and the first AP certification and association information exists in the valid time range of the MT and the first AP certification and association, and notifying the handover judgment unit to encrypt the new key when the judgment result is yes.
- The system further comprises a first AP side handover information synchronization unit and a second AP side handover information synchronization unit, wherein
- the first AP side handover information synchronization unit is used for sending MT and the first AP association relief information to an AP in a cell which overlaps with a cell covered by the first AP service except the second AP; and
- the second AP side handover information synchronization unit is used for sending MT and the second AP certification and association information to an AP in a cell which overlaps with a cell covered by the second AP service.
- In the technical solution described by the above embodiments of the present invention, since each AP stores the mobile terminal certification and association information about the cells which overlap with the cells covered by its service, when the MT needs to hand over from a cell to another cell, the AP serving another cell can rapidly determine whether or not to allow the MT to access according to the stored information, thus overcoming the problem that the wireless local area network communication needs to be re-certificated during a handover, significantly improving the communication efficiency, and avoiding the influence on the quality of service by temporary service interruption caused by handover; and, since each AP stores the shared key of the APs of the cells which overlap with the cells covered by its service, the data transmitted between the MT and different APs have different keys or employ a key negotiated by the MT and the AP, which can ensure that the data transmitted between each MT and AP have different keys, apparently avoiding the use of the same key by one ESS and effectively improving the communication security.
-
FIG. 1 is a schematic diagram of an MT handover scenario in the related art; -
FIG. 2 is a flowchart of an MT handover method according to an embodiment of the present invention; -
FIG. 3 is a schematic diagram of an MT handover scenario according to the embodiments of the present invention; -
FIG. 4 is a schematic diagram of a wireless mobile terminal certification and association information list according to the embodiments of the present invention; and -
FIG. 5 is a flowchart of an MT handover method according to another embodiment of the present invention. - The embodiments of the present invention provide a handover method for a mobile terminal, and as shown in
FIG. 2 ,FIG. 2 is a flowchart of an MT handover method according to an embodiment of the present invention, this method includes: - S102: a data frame is sent to a second AP when a mobile terminal (MT) needs to hand over from a cell covered by a first AP service to a cell covered by a second AP service, with the data frame including an associated number between the MT and the first AP and an MAC access of the first AP;
- S104: after having received the data frame, the second AP compares the associated number between the MT and the first AP and the media access control (MAC) address of the first AP in the data frame with the corresponding contents in the mobile terminal certification and association information stored by the second AP, wherein when the comparison result presents to be consistent, then the second AP encrypts a new key using the shared key of the first AP locally stored and sends the information obtained from encryption to the MT, and the MT relieves the association with the first AP and obtains a number associated with the second AP.
- In this case, when comparing mobile terminal certification and association information, it further comprises: judging whether the MT and the first AP certification and association information is within the valid time range of the MT and the first AP certification and association, if yes, then the second AP sends the MT and the first AP certification and association information to the MT using the locally stored new key encrypted by the shared key of the first AP.
- S106: the MT adds the association with the second AP according to the new associated number, decrypts the obtained new key, and carries out data transmission with the second AP using the new key.
- Thus, the MT completes the handover from the first cell to the second cell. In the technical solution described by the above embodiments, the method further comprises:
- the second AP scans a local mobile terminal certification and association information list regularly and deletes all the certification and association information related to the MT which exceeds the valid time range of certification and association.
- In the technical solution described by the above embodiments, the method further comprises:
- the second AP pre-stores the mobile terminal certification and association information about a cell which overlaps with a cell covered by the second AP service, the information includes the mobile terminal certification and association information about a cell which overlaps with a cell covered by the first AP service, and also pre-stores the shared key of an AP of a cell which overlaps with a cell covered by the second AP service, the key includes the shared key of the first AP. The new key obtained by the decryption of the MT can be the shared key of the second AP and can also be a key generated after the negotiation between the MT and the second AP.
- The MT and the first AP certification and association information in the technical solution described by the above embodiments includes: an associated number between the MT and the first AP and an MAC address of the first AP, and also can include valid time of MT and the first AP certification and association, the first AP information, MT certification information and valid time for the first AP caching the frame. In this case, the MT and the first AP certification and association information can be stored in a list or database.
- When the MT relieves the association with the first AP, the method further comprises:
- since the first AP is preconfigured with the valid time for the first AP caching the frame related to the MT, the association relief between the MT and the first AP triggers the timing of the valid time for the first AP caching the frame;
- if there is a data frame to be sent to the MT within the valid time for caching the frame, the first AP caches all the data frames for the MT to be sent to the MT before receiving the MT and the second AP certification and association information.
- In the technical solution described by the above embodiments, the method further comprises: the second AP looks up the locally stored mobile terminal certification and association information about the cell covered by the first AP service, if the associated number between the MT and the first AP and the MAC address of the first AP do not exist in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP are inconsistent with the information in the mobile terminal certification and association information about the cell covered by the first AP service, or if the associated number between the MT and the first AP and the MAC address of the first AP exist in the mobile terminal certification and association information about the cell covered by the first AP service, however the MT and the first AP certification and association information already exceeds the valid time range of the MT and the first AP certification and association, then the handover process ends.
- In the technical solution described by the above embodiments, the method further comprises: after the second AP has received the data frame sent from the MT, the second AP looks up a locally stored access control list, if the information about MT does not exist in the access control list, then it loops up a mobile terminal certification and association information list of the cell covered by the first AP service.
- In the technical solution described by the above embodiments, cells which overlap with cells covered by the first AP service can be a plurality of cells, which includes a cell covered by the second AP service; likewise, cells which overlap with cells covered by the second AP service can also be a plurality of cells, which also includes a cell covered by the first AP service. After the MT has completed the handover, the method further comprises:
- the second AP sends the MT and the second AP certification and association information to the APs of the cells which overlap with cells covered by the second AP service.
- After the APs of the cells which overlap with cells covered by the second AP service and do not overlap with cells covered by the first AP service have received the MT and the second AP certification and association information, they look up the locally stored mobile terminal certification and association information respectively, determine that the MT and the second AP certification and association information is not previously stored, then store the MT and the second AP certification and association information.
- After the APs of the cells which overlap with cells covered by the first AP service and the second AP service and the first AP have received the MT and the second AP certification and association information, they look up the locally stored mobile terminal certification and association information respectively, determine that the MT and the first AP certification and association information is previously stored, then delete the MT and the first AP certification and association information and store the MT and the second AP certification and association information.
- In the technical solution described by the above embodiments, the method further comprises:
- after the first AP has stored the MT and the second AP certification and association information, the first AP sends the MT and the first AP association relief information to the APs of the cells which overlap cells covered by with the first AP service except the second AP.
- After the APs of the cells which overlap with cells covered by the first AP service and the second AP service have received the MT and the first AP association relief information sent from the first AP, they look up the locally stored mobile terminal certification and association information respectively, determine that the MT and the second AP certification and association information is previously stored, then discard the MT and the first AP association relief information.
- After the APs of the cells which overlap with cells covered by the first AP service and the second AP service have received the MT and the first AP association relief information sent from the first AP, they look up the locally stored mobile terminal certification and association information, determine that the MT and the first AP certification and association information is previously stored, then delete the MT and the first AP association relief information.
- In the technical solution described by the above embodiments, the method further comprises: the first AP sends the data frame cached by the MT to the second AP within the valid time for caching the frame in addition to storing the MT and the second AP certification and association information, then the second AP sends the data frame to the MT.
- In the technical solution described by the above embodiments of the present invention, since each AP is stored with the mobile terminal certification and association information about a cell which overlaps with a cell covered by its service, when the MT needs to hand over from a cell covered by the first AP service to a cell covered by the second AP service, the second AP can rapidly determine whether or not to allow the MT to access according to the stored information, thus overcoming the problem that the wireless local cell network communication needs to be re-certificated during the handover, significantly improving the communication efficiency, and avoiding the influence on the quality of service by temporary service interruption caused by handover; and, since each AP is also stored with the shared key of an AP of a cell which overlaps with a cell covered by its service, the data transmitted between the MT and different APs have different keys or employ a key negotiated by the MT and the AP, which can ensure that the data transmitted between each MT and AP have different keys, apparently avoiding the problem that one ESS uses an identical key and effectively improving the communication security.
- As shown in
FIG. 3 ,FIG. 3 is a schematic diagram of an MT handover scenario according to the embodiments of the present invention. In the figure, there are eight APs (AP1-AP8), eight cells (area1-area8) and one MT. Hereinafter, the handover method for a mobile terminal according to another embodiment of the present invention will be described by taking cells covered by AP1, AP2, AP3, AP4, AP5, AP6, AP7, and AP8 services and the MT handing over from a cell covered by the AP1 service (area1) to a cell covered by the AP3 service (area3) as an example. - Each AP stores the mobile terminal certification and association information about a cell which overlaps with a cell covered by its service. In
FIG. 3 , taking area1 and area3 as an example, cells which overlap with area1 include: area2, area3, area4, and area8, and cells which overlap with area3 include: area1, area2, area4, area5, area6 and area7. Taking AP1 as an example, the MT is associated with AP1, AP1 sends the MT and AP1 certification and association information to AP2, AP3, AP4 and AP8; and AP2, AP3, AP4 and AP8 store the MT and AP1 certification and association information. Therefore, AP3 stores the mobile terminal certification and association information about area1, the information includes the MT and AP1 certification and association information. Likewise, if there is the mobile terminal certification and association information about area2, area4, area5, area6 or area7, AP3 will store the same. In general, the wireless terminal certification and association information can be stored in the list, and also the wireless terminal certification and association information can be stored in the database. The specified way for storage is not limited by the present invention. In the following, the technical solution of this embodiment will be described with a wireless terminal certification and association information list. - As shown in
FIG. 4 ,FIG. 4 is a schematic diagram of a wireless mobile terminal certification and association information list according to the embodiments of the present invention. The information included by the list in the figure is: associated number between the MT and the AP, associated AP information, MAC address of the associated AP, MT certification information, valid time of MT and AP certification and association, valid time for the associated AP caching the frame, etc. - As shown in
FIG. 5 ,FIG. 5 is a flowchart of an MT handover method according to another embodiment of the present invention, and the method includes: - S202: the MT needs to hand over from a cell (area1) covered by AP1 service to a cell (area3) covered by AP3 service, and sends a data frame to AP3, the data frame carries the associated number between MT and AP1 and the MAC address of AP1.
- S204: after having received the data frame, AP3 compares the associated number between MT and AP1 and the MAC address of AP1 in the data frame with the corresponding information in the mobile terminal certification and association information, wherein when the comparison result presents to be consistent, then AP3 encrypts a new key using the shared key of AP1 stored locally and sends the information obtained from the encryption to the MT, and the MT relieves the association with AP1 and obtains a number associated with AP3.
- In addition, when comparing the mobile terminal certification and association information, it further comprises: judging whether the MT and the AP1 certification and association information is within the valid time range of the MT and the AP1 certification and association, if yes, then AP3 sends the new key encrypted using the locally stored new key encrypted by the shared key of AP1 to the MT.
- The method further comprises: AP1 is pre-configured with the valid time for caching the frame related to the MT, the association relief between MT and AP1 triggers the timing of the valid time for AP1 caching a frame. If there is a data frame to be sent to the MT within the valid time for caching the frame, the AP1 caches all the data frames for the MT to be sent to the MT before receiving the MT and AP3 certification and association information; and if the valid time for caching the frame is expired, even there is a data frame to be sent to the MT, AP1 will still discard this data frame.
- The method further comprises: if the associated number between the MT and AP1 and the MAC address of AP1 do not exist in the mobile terminal certification and association information list, or if the associated number between the MT and AP1 and the MAC address of AP1 are inconsistent with the information in the mobile terminal certification and association information list, or if the associated number between the MT and AP1 and the MAC address of AP1 exist in the mobile terminal certification and association information list, however the MT and AP1 certification and association information already exceeds the valid time range of the MT and AP1 certification and association, then the handover process ends.
- The method further comprises: after AP3 has received the data frame and before it looked up the local mobile terminal certification and association information list, AP3 looks up the local access control list; if the MT information does not exist in this local access control list, then S204 is performed.
- The method further comprises: if the MT information exists in this local access control list, the AP3 can forward the data sent by the MT according to the information in this local access control list.
- It needs to note that each AP stores the shared key of an AP of a cell which overlaps with a cell covered by its service. Taking AP1 and AP3 as an example, AP1 pre-stores the shared keys of AP2, AP3, AP4 and AP8, AP3 pre-stores the shared keys of AP1, AP2, AP4, AP5, AP6, and AP7, AP3 can directly encrypt the new key using the stored shared key of AP1. This new key can be the shared key of AP3 and can also be a key generated after the negotiation between MT and AP3.
- S206: the MT adds the association with AP3 according to the new associated number, decrypts the obtained new key, and carries out data transmission with AP3 using the new key.
- Thus, the MT completes the handover from area1 to area3.
- Continuously in conjunction with
FIG. 3 , after the MT has completed the handover, the method further comprises: - Step 208: AP3 sends MT and AP3 certification and association information to AP1, AP2, AP4, AP5, AP6 and AP7.
- Step S210: after having received the MT and AP3 certification and association information, AP5, AP6 and AP7 look up the local mobile terminal certification and association information lists respectively, determine that the MT and AP3 certification and association information is not previously stored in the local mobile terminal certification and association information list, then store the MT and AP3 certification and association information into the local mobile terminal certification and association information list.
- Step S212: after having received the MT and AP3 certification and association information, AP1, AP2 and AP4 look up the local mobile terminal certification and association information list respectively, determine that the MT and AP1 certification and association information is previously stored in the local mobile terminal certification and association information list, since MT and AP3 certification and association information is much newer, then they delete the MT and AP1 certification and association information and store the MT and AP3 certification and association information into the local mobile terminal certification and association information list.
- S214: after AP1 has updated the certification and association information related to the MT, AP1 sends MT and AP1 association relief information to AP2, AP4 and AP8 except AP3.
- The method further comprises: AP1 sends the data frame cached by the MT to AP3 within the valid time for caching the frame in addition to storing the MT and AP3 certification and association information, then AP3 sends this data frame to the MT.
- S216: after having received the MT and AP1 association relief information sent by AP1, AP2 and AP4 look up the local mobile terminal certification and association information list respectively, determine that what is stored in the local mobile terminal certification and association information list is the MT and AP3 certification and association information, then discard the MT and AP1 association relief information.
- S218: after having received the MT and AP1 association relief information sent by AP1, AP8 looks up the local mobile terminal certification and association information list respectively, determine that what is previously stored in the local mobile terminal certification and association information list is the MT and AP1 certification and association information, then delete the MT and AP1 certification and association information.
- The method further comprises: AP1, AP2, AP3, AP4, AP5, AP6, AP7, and AP8 scan the local mobile terminal certification and association information list regularly, delete the certification and association information related to MT which exceeds the valid time range of the certification and association.
- The method further comprises: when the association time of MT and AP3 exceeds the valid time range of the MT and AP3 certification and association, AP3 sends MT and AP3 certification and association information to AP1, AP2, AP4, AP5, AP6, and AP7; and after having received the MT and AP3 certification and association information, AP1, AP2, AP4, AP5, AP6, and AP7 update the local mobile terminal certification and association information lists respectively.
- In the technical solution described by the above embodiments of the present invention, since each AP stores the mobile terminal certification and association information of a cell which overlaps with a cell covered by its service, when the MT needs to hand over from area1 to area3, AP3 can rapidly determine whether or not to allow the MT to access according to the stored information, thus overcoming the problem that the wireless local area network communication needs to be re-certificated during the handover, significantly improving the communication efficiency, and avoiding the influence on the quality of service by temporary service interruption caused by the handover; and, since each AP also stores the shared key of an AP of a cell which overlaps with a cell covered by its service, the data transmitted between the MT and different APs have different keys or employ a key negotiated by the MT and the AP, which can ensure that the data transmitted between each MT and AP have different keys, apparently avoiding the problem that one ESS uses an identical key and effectively improving the communication security.
- During a practical application, the above handover process can also be achieved by setting a system, for example:
- providing a handover request unit and a user side handover execution unit in the MT, and providing a handover judgment unit and a network side handover execution unit in the second AP, wherein
- the handover request unit is used for sending a data frame for requesting a handover when an MT to which it belongs needs to handover from a first AP to a second AP, with the data frame including an associated number between MT and the first AP and the MAC address of the first AP;
- the handover judgment unit is used for comparing the associated number between MT and the first AP and the MAC address of the first AP in the data frame from the handover request unit with the corresponding contents in the mobile terminal certification and association information stored by the second AP, when the comparison result presents to be consistent, then notifying the handover execution unit, encrypting a new key using the shared key of the first AP, and sending the information obtained from the encryption to the user side handover execution unit; and the user side handover execution unit is used for completing the handover with the network side handover execution unit by using the new key.
- A timing judgment unit can also be provided in the second AP for judging whether the MT and the first AP certification and association information exists in the valid time range of the MT and the first AP certification and association, and notifying the handover judgment unit to encrypt the new key when the judgment result is yes.
- Still, a first AP side handover information synchronization unit and a second AP side handover information synchronization unit can be provided in the first AP and the second AP respectively, wherein the first AP side handover information synchronization unit is used for sending MT and the first AP association relief information to the APs in the cells which overlap with the cells covered by the first AP service except the second AP; and the second AP side handover information synchronization unit is used for sending MT and the second AP certification and association information to the APs in the cells which overlap with the cells covered by the second AP service.
- By way of the above description of the embodiments, those skilled in the art can clearly learn that the present invention can be implemented in the manner of software plus a necessary hardware platform, and of course, it can also be embodied totally by hardware, but the former is a preferred implementation in most cases. Based'on such perception, part of or all of the contributions made by the technical solution of the present invention to the related art can be embodied in the form of software products, and this computer software product can be stored in a storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., including several instructions to enable a computer device (it can be a personal computer, server, or network device, etc.) to execute the method described by various embodiments of the present invention or some portions of the embodiments.
- Above description is only to illustrate the preferred embodiments but not to limit the present invention, and any amendments, equivalent substitutions, improvements etc. within the sprit and principle of the present invention are all concluded in the scope of protection of the present invention
Claims (16)
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN200910110473 | 2009-11-03 | ||
CN200910110473A CN101702802B (en) | 2009-11-03 | 2009-11-03 | Mobile terminal handover method |
CN200910110473.6 | 2009-11-03 | ||
PCT/CN2010/071642 WO2010145273A1 (en) | 2009-11-03 | 2010-04-08 | Handoff method and system for mobile terminal |
Publications (2)
Publication Number | Publication Date |
---|---|
US20120250657A1 true US20120250657A1 (en) | 2012-10-04 |
US8879505B2 US8879505B2 (en) | 2014-11-04 |
Family
ID=42157688
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/505,766 Active 2030-09-14 US8879505B2 (en) | 2009-11-03 | 2010-04-08 | Handoff method and system for mobile terminal |
Country Status (4)
Country | Link |
---|---|
US (1) | US8879505B2 (en) |
EP (1) | EP2485513B1 (en) |
CN (1) | CN101702802B (en) |
WO (1) | WO2010145273A1 (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20150319657A1 (en) * | 2014-04-30 | 2015-11-05 | Aruba Networks, Inc. | Distributed Method for Client Optimization |
US20160142915A1 (en) * | 2012-08-15 | 2016-05-19 | Interdigital Patent Holdings, Inc. | Enhancements to enable fast security setup |
US20180332506A1 (en) * | 2017-05-12 | 2018-11-15 | Apple Inc. | Fast Return to Wi-Fi |
US10229259B2 (en) * | 2015-08-21 | 2019-03-12 | Huawei Technologies Co., Ltd. | Task handoff method and related device |
US11006274B2 (en) * | 2015-11-30 | 2021-05-11 | Qualcomm Incorporated | Service-based network selection |
Families Citing this family (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102075938B (en) * | 2011-02-25 | 2013-05-15 | 北京交通大学 | Address locking mechanism-based fast re-authentication method |
WO2012159356A1 (en) * | 2011-07-29 | 2012-11-29 | 华为技术有限公司 | Method, apparatus and system for simplifying wireless local area network authentication |
CN103369526A (en) * | 2012-03-31 | 2013-10-23 | 华为终端有限公司 | Key information processing method and device |
CN104065793A (en) * | 2013-03-18 | 2014-09-24 | 珠海格力电器股份有限公司 | Terminal device and device access point matching method |
CN103796206B (en) * | 2013-03-28 | 2015-04-08 | 深圳光启创新技术有限公司 | Roaming method and communication system applied to traffic system |
EP2996376B1 (en) * | 2013-05-10 | 2017-10-11 | Fujitsu Limited | Wireless communication method, wireless communication system, and base station |
US10623955B2 (en) * | 2014-10-30 | 2020-04-14 | Telefonaktiebolaget Lm Ericsson (Publ) | Integrated cellular system with Wi-Fi-fallback |
ES2896057T3 (en) * | 2015-10-08 | 2022-02-23 | Ericsson Telefon Ab L M | Node for use in a communication network and method of operating the same |
CN105611607B (en) * | 2015-12-25 | 2019-05-10 | 北京奇虎科技有限公司 | It realizes the method for merging multiple WiFi and realizes the method and system of WiFi connection |
CN105657746B (en) * | 2016-01-05 | 2019-09-13 | 上海斐讯数据通信技术有限公司 | A kind of wireless terminal fast roaming system and method based on AP syntople |
CN106412883B (en) * | 2016-11-10 | 2021-11-05 | 新华三技术有限公司 | Method and device for accessing wireless network |
CN106604280A (en) * | 2017-01-06 | 2017-04-26 | 国网新疆电力公司电力科学研究院 | Handover method of wireless network |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6473413B1 (en) * | 1999-06-22 | 2002-10-29 | Institute For Information Industry | Method for inter-IP-domain roaming across wireless networks |
US20040014422A1 (en) * | 2002-07-19 | 2004-01-22 | Nokia Corporation | Method and system for handovers using service description data |
US20040240412A1 (en) * | 2003-05-27 | 2004-12-02 | Winget Nancy Cam | Facilitating 802.11 roaming by pre-establishing session keys |
US7146636B2 (en) * | 2000-07-24 | 2006-12-05 | Bluesocket, Inc. | Method and system for enabling centralized control of wireless local area networks |
US20070291681A1 (en) * | 2006-06-16 | 2007-12-20 | Nokia Corporation | Method and apparatus for providing information about each group address that has data waiting for delivery in node, point or terminal in a WLAN |
US20090028120A1 (en) * | 2007-07-26 | 2009-01-29 | Lg-Nortel Co., Ltd. | Method and apparatus for providing neighborhood ap information in a wireless lan system |
US20090303974A1 (en) * | 2008-06-10 | 2009-12-10 | Industrial Technology Research Institute | Wireless network, access point, and load balancing method thereof |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR100480258B1 (en) | 2002-10-15 | 2005-04-07 | 삼성전자주식회사 | Authentication method for fast hand over in wireless local area network |
US7792527B2 (en) | 2002-11-08 | 2010-09-07 | Ntt Docomo, Inc. | Wireless network handoff key |
US8081759B2 (en) * | 2004-09-15 | 2011-12-20 | Nokia Corporation | Apparatus, and an associated method, for facilitating fast transition in a network system |
CN1225942C (en) * | 2004-11-04 | 2005-11-02 | 西安西电捷通无线网络通信有限公司 | Method of improving mobile terminal handover switching performance in radio IP system |
-
2009
- 2009-11-03 CN CN200910110473A patent/CN101702802B/en not_active Expired - Fee Related
-
2010
- 2010-04-08 EP EP10788669.9A patent/EP2485513B1/en not_active Not-in-force
- 2010-04-08 US US13/505,766 patent/US8879505B2/en active Active
- 2010-04-08 WO PCT/CN2010/071642 patent/WO2010145273A1/en active Application Filing
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6473413B1 (en) * | 1999-06-22 | 2002-10-29 | Institute For Information Industry | Method for inter-IP-domain roaming across wireless networks |
US7146636B2 (en) * | 2000-07-24 | 2006-12-05 | Bluesocket, Inc. | Method and system for enabling centralized control of wireless local area networks |
US20040014422A1 (en) * | 2002-07-19 | 2004-01-22 | Nokia Corporation | Method and system for handovers using service description data |
US20040240412A1 (en) * | 2003-05-27 | 2004-12-02 | Winget Nancy Cam | Facilitating 802.11 roaming by pre-establishing session keys |
US20070291681A1 (en) * | 2006-06-16 | 2007-12-20 | Nokia Corporation | Method and apparatus for providing information about each group address that has data waiting for delivery in node, point or terminal in a WLAN |
US20090028120A1 (en) * | 2007-07-26 | 2009-01-29 | Lg-Nortel Co., Ltd. | Method and apparatus for providing neighborhood ap information in a wireless lan system |
US20090303974A1 (en) * | 2008-06-10 | 2009-12-10 | Industrial Technology Research Institute | Wireless network, access point, and load balancing method thereof |
Cited By (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20160142915A1 (en) * | 2012-08-15 | 2016-05-19 | Interdigital Patent Holdings, Inc. | Enhancements to enable fast security setup |
US9743280B2 (en) * | 2012-08-15 | 2017-08-22 | Interdigital Patent Holdings, Inc. | Enhancements to enable fast security setup |
US20150319657A1 (en) * | 2014-04-30 | 2015-11-05 | Aruba Networks, Inc. | Distributed Method for Client Optimization |
US9357458B2 (en) * | 2014-04-30 | 2016-05-31 | Aruba Networks, Inc. | Distributed method for client optimization |
US20160192281A1 (en) * | 2014-04-30 | 2016-06-30 | Aruba Networks, Inc. | Distributed method for client optimization |
US9544840B2 (en) * | 2014-04-30 | 2017-01-10 | Aruba Networks, Inc. | Distributed method for client optimization |
US10229259B2 (en) * | 2015-08-21 | 2019-03-12 | Huawei Technologies Co., Ltd. | Task handoff method and related device |
US11006274B2 (en) * | 2015-11-30 | 2021-05-11 | Qualcomm Incorporated | Service-based network selection |
US20180332506A1 (en) * | 2017-05-12 | 2018-11-15 | Apple Inc. | Fast Return to Wi-Fi |
US11206582B2 (en) * | 2017-05-12 | 2021-12-21 | Apple Inc. | Fast return to Wi-Fi |
Also Published As
Publication number | Publication date |
---|---|
EP2485513A4 (en) | 2015-02-25 |
US8879505B2 (en) | 2014-11-04 |
CN101702802B (en) | 2012-10-17 |
EP2485513A1 (en) | 2012-08-08 |
WO2010145273A1 (en) | 2010-12-23 |
CN101702802A (en) | 2010-05-05 |
EP2485513B1 (en) | 2016-08-17 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8879505B2 (en) | Handoff method and system for mobile terminal | |
CN101014041B (en) | Systems and methods for handoff in wireless network | |
CN1652630B (en) | Method for generating access point addressable neighbouring areas map, the access point and wireless network | |
US7263357B2 (en) | Method for fast roaming in a wireless network | |
US10028179B2 (en) | Reducing signaling during AP to AP handoff in dense networks | |
Kassab et al. | Fast pre-authentication based on proactive key distribution for 802.11 infrastructure networks | |
US20110199967A1 (en) | Techniques to assign multiple identifiers in a wireless network | |
US9654969B2 (en) | Method and device for managing security key for communication authentication of subscriber station used in cooperative communication of multiple base station in radio communication system | |
KR20110069673A (en) | Method and apparatus for performing handover with considering authentication procedure | |
US9084111B2 (en) | System and method for determining leveled security key holder | |
CN100428715C (en) | Wireless LAN and method for implementing quick switching between mobile stations | |
KR100638629B1 (en) | Authenticated handoff with low latency and traffic management method in wlan | |
Omari et al. | Simulation of reducing re-association and reauthentication phases for low handoff latency | |
KR20050121607A (en) | Authentication method of handover in a wireless communication system | |
Al-Rawi et al. | Reducing Layer 2 Handoff Latency in WLANs using Advanced Context Distribution | |
Qi et al. | BSS transition optimizations and analysis for VoIP over WLAN | |
Sun et al. | A Fast Handover Scheme betweenWiFi andWiMAX Networks |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: ZTE CORPORATION, CHINA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ZHOU, WEI;REEL/FRAME:028147/0894 Effective date: 20120416 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551) Year of fee payment: 4 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 8TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1552); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 8 |